Vulnerabilities
CVE-2026-26747 - Monica Host Header Poisoning
CVE ID : CVE-2026-26747 Published : Feb. 20, 2026, 5:25 p.m. | 1 hour, 31 minutes ago Description : A Host Header Poisoning vulnerability exists in Monica 4.1.2 due to improper handling of the HTTP Host header in app/Providers/AppServiceProvider.php, combined with the default misconfiguration where the